Proofpoint | ObserveIT On-Premises Insider Threat Management
Active Directory Prerequisites
This section describes the requirements for the Active Directory Service Account running ObserveIT services.
All ObserveIT back-end components must be members of the same Active Directory domain.
ObserveIT Service Account
Create an Active Directory Service Account for ObserveIT with the following properties:
-
Use current naming convention for the account. If no naming convention exists, use OITServiceAccount.
-
Set user rights as member of the Domain Users Active Directory Security Group, no additional permissions are required.
-
Set password to never expire.
ObserveIT Data Retention Account
Create an Active Directory Service Account for ObserveIT data retention with the following properties:
-
Use current naming convention for the account. If no naming convention exists, use OITDataRetention.
-
Set user rights as member of the Domain Users Active Directory Security Group, no additional permissions are required.
-
Set password to never expire.
Related Topics: